From owner-freebsd-ports  Thu Jul  4 11:35:23 2002
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C0BBB37B401
	for <ports@FreeBSD.org>; Thu,  4 Jul 2002 11:35:19 -0700 (PDT)
Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5C40143E31
	for <ports@FreeBSD.org>; Thu,  4 Jul 2002 11:35:17 -0700 (PDT)
	(envelope-from dirk.meyer@dinoex.sub.org)
Received: from net2.dinoex.sub.org (dinoex@net2.dinoex.sub.org [127.0.0.1])
	by net2.dinoex.sub.org (8.12.4/8.12.4) with ESMTP id g64IZ74W016402
	for <ports@FreeBSD.org>; Thu, 4 Jul 2002 20:35:08 +0200 (CEST)
	(envelope-from dirk.meyer@dinoex.sub.org)
X-MDaemon-Deliver-To: <ports@FreeBSD.org>
Received: from gate.dinoex.sub.org (dinoex@localhost)
	by net2.dinoex.sub.org (8.12.5/8.12.5/Submit) with BSMTP id g64IZ5wC016322
	for <ports@FreeBSD.org>; Thu, 4 Jul 2002 20:35:05 +0200 (CEST)
	(envelope-from dirk.meyer@dinoex.sub.org)
To: ports@FreeBSD.org
Message-ID: <H6U+pdaO5e@dmeyer.dinoex.sub.org>
From: dirk.meyer@dinoex.sub.org (Dirk Meyer)
Organization: privat
Subject: HEADS UP: openssh defaults to PermitRootLogin no
Date: Thu, 04 Jul 2002 20:33:12 +0200
X-Mailer: Dinoex 1.77
X-Gateway: ZCONNECT gate.dinoex.sub.org [UNIX/Connect 0.94]
X-PGP-Fingerprint: 44 16 EC 0A D3 3A 4F 28  8A 8A 47 93 F1 CF
	2F 12
X-ZC-TELEFON: V+49-5606-6512Q F+49-5606-55023
X-Copyright: (C) Copyright 2001 by Dirk Meyer -- All rights reserved.
X-ZC-POST: Im Grund 4;34317 Habichtswald;Germany
X-PGP-Key-Avail: mailto:pgp-public-keys@keys.de.pgp.net Subject:GET
	0x331CDA5D
X-ZC-VIA: 20020704000000S+2@dinoex.sub.org
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ports.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ports>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ports>
X-Loop: FreeBSD.org


'PermitRootLogin no' is the new default for the OpenSSH port.
This now matches the PermitRootLogin configuration of OpenSSH in
the base system.  Please be aware of this when upgrading your
OpenSSH port, and if truly necessary, re-enable remote root login
by readjusting this option in your sshd_config.

Users are encouraged to create single-purpose users with ssh keys
and very narrowly defined sudo privileges instead of using root
for automated tasks.

regrads,

- Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany
- [dirk.meyer@dinoex.sub.org],[dirk.meyer@guug.de],[dinoex@FreeBSD.org]

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message